# server {
#	listen 443 ssl;
#	listen [::]:443 ssl;
#	server_name xxx.ddns.net;
#	ssl_certificate /etc/letsencrypt/live/xxx.ddns.net/fullchain.pem;
#	ssl_certificate_key /etc/letsencrypt/live/xxx.ddns.net/privkey.pem;
#	}

 server {
   listen 80;
   listen [::]:80;
   server_name xxx.ddns.net;
#   return 301 https://$host$request_uri;
   proxy_buffering off;
   add_header X-Frame-Options SAMEORIGIN;
   add_header X-Content-Type-Options nosniff;
   add_header X-XSS-Protection "1; mode=block";
   add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
   add_header Referrer-Policy strict-origin;
   real_ip_header X-Forwarded-For;

   location /subsonic {
	proxy_pass http://192.168.0.11:8006;
	}

   location /ombi/ {
     	proxy_pass http://192.168.0.12:5000;
 	proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Host $server_name;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Ssl on;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout  90;
        proxy_redirect http://192.168.0.12:5000 https://$host;
	}
   location /jackett/ {
	proxy_pass http://192.168.0.4:9117;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}
   location /radarr {
    	proxy_pass http://192.168.0.7:7878;
        }
   location /rutorrent {
	proxy_pass http://192.168.0.5/rutorrent;
	#include scgi_params;
	#scgi_pass 192.168.0.5:5001;
	}
   location /medusa {
	proxy_pass http://192.168.0.9:8081;
	auth_basic "Restricted";
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header X-Forwarded-Host $host:80;
	proxy_set_header X-Forwarded-Server $host;
	proxy_set_header X-Forwarded-Port 80;
	proxy_set_header X-Forwarded-Proto $scheme;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_read_timeout 86400;
	}
   location /organizr {
	proxy_pass http://192.168.0.26/organizr;
	}
   location /plexpy {
	proxy_pass http://192.168.0.18:8181;
	}
   location /nextcloud {
	proxy_pass http://192.168.0.6/nextcloud;
	}
}